locked
RuntimeBroker.exe has initiated the power off of computer RRS feed

  • Question

  • Hi,

    I am facing the server shutdown issue after one of our application stopped unexpectedly(crash). I don't know why server was shutdown every time application was crash. This problem was happened on windows server 2016. It does happen on windows server 2008 even application was crash. Why this is happen on windows server 2016 and how to solve this. Following log is from application crash log and server shutdown log from event log. After 5 mins of application crash, windows server was shutdown by runtimebroker.exe.

    #Application event log (EventID 1000)

    Faulting application name: UTS.BackService.exe, version: 0.3.1.0, time stamp: 0x5ccaa144
    Faulting module name: System.ServiceModel.Internals.ni.dll, version: 4.7.2112.0, time stamp: 0x59966885
    Exception code: 0xc0000005
    Fault offset: 0x0000000000047a11
    Faulting process id: 0x1eb0
    Faulting application start time: 0x01d5d4a08a058b7d
    Faulting application path: C:\Program Files\DMS\UTS.BackService\UTS.BackService.exe
    Faulting module path: C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Servd1dec626#\2a3872e157d8034f374f0866b2cecd93\System.ServiceModel.Internals.ni.dll
    Report Id: e5198736-2d9f-480a-b1f7-378e3663b98c
    Faulting package full name: 
    Faulting package-relative application ID: 

    #Application event log (EventID 1026)

    Application: UTS.BackService.exe
    Framework Version: v4.0.30319
    Description: The process was terminated due to an unhandled exception.
    Exception Info: System.AccessViolationException
       at Oracle.DataAccess.Client.OpsDac.Read(IntPtr, IntPtr, IntPtr, IntPtr ByRef, Oracle.DataAccess.Client.OpoSqlValCtx*, Oracle.DataAccess.Client.OpoMetValCtx*, Oracle.DataAccess.Client.OpoDacValCtx*)
       at Oracle.DataAccess.Client.OracleDataReader.Read()
       at System.Data.Common.DataAdapter.FillLoadDataRowChunk(System.Data.ProviderBase.SchemaMapping, Int32, Int32)
       at System.Data.Common.DataAdapter.FillFromReader(System.Data.DataSet, System.Data.DataTable, System.String, System.Data.ProviderBase.DataReaderContainer, Int32, Int32, System.Data.DataColumn, System.Object)
       at System.Data.Common.DataAdapter.Fill(System.Data.DataSet, System.String, System.Data.IDataReader, Int32, Int32)
       at Oracle.DataAccess.Client.OracleDataAdapter.Fill(System.Data.DataSet, System.String, System.Data.IDataReader, Int32, Int32)
       at Oracle.DataAccess.Client.OracleDataAdapter.Fill(System.Data.DataSet, Int32, Int32, System.String, System.Data.IDbCommand, System.Data.CommandBehavior)
       at System.Data.Common.DbDataAdapter.Fill(System.Data.DataSet, Int32, Int32, System.String)
       at FIS.Base.BufferResult.FetchToDataTable(Int32)
       at FIS.Controllers.BufferController.FetchNextPage(FIS.Base.DataContainer ByRef, System.String, System.String, System.String, System.DateTime, Int32)

    Exception Info: System.Reflection.TargetInvocationException
       at System.RuntimeMethodHandle.InvokeMethod(System.Object, System.Object[], System.Signature, Boolean)
       at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(System.Object, System.Object[], System.Object[])
       at System.Reflection.RuntimeMethodInfo.Invoke(System.Object, System.Reflection.BindingFlags, System.Reflection.Binder, System.Object[], System.Globalization.CultureInfo)
       at FIS.Plugin.MessageMethodInfo.Invoke(System.Object, System.ServiceModel.Channels.Message, System.ServiceModel.Channels.Message ByRef)
       at FIS.Base.ServerMessageProcess.MessageControllerRoutingProcessing(System.Object, FIS.Base.MessageProcessEventArgs)
       at FIS.Controllers.MessageController.ProcessMessage(System.ServiceModel.Channels.Message)
       at DynamicClass.SyncInvokeProcessMessage(System.Object, System.Object[], System.Object[])
       at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(System.Object, System.Object[], System.Object[] ByRef)
       at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(System.ServiceModel.Dispatcher.MessageRpc ByRef)
       at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(System.ServiceModel.Dispatcher.MessageRpc ByRef)
       at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage11(System.ServiceModel.Dispatcher.MessageRpc ByRef)
       at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean)
       at System.ServiceModel.Dispatcher.ChannelHandler.DispatchAndReleasePump(System.ServiceModel.Channels.RequestContext, Boolean, System.ServiceModel.OperationContext)
       at System.ServiceModel.Dispatcher.ChannelHandler.HandleRequest(System.ServiceModel.Channels.RequestContext, System.ServiceModel.OperationContext)
       at System.ServiceModel.Dispatcher.ChannelHandler.AsyncMessagePump(System.IAsyncResult)
       at System.ServiceModel.Dispatcher.ChannelHandler.OnAsyncReceiveComplete(System.IAsyncResult)
       at System.Runtime.Fx+AsyncThunk.UnhandledExceptionFrame(System.IAsyncResult)
       at System.Runtime.AsyncResult.Complete(Boolean)
       at System.ServiceModel.Channels.TransportDuplexSessionChannel+TryReceiveAsyncResult.OnReceive(System.IAsyncResult)
       at System.Runtime.Fx+AsyncThunk.UnhandledExceptionFrame(System.IAsyncResult)
       at System.Runtime.AsyncResult.Complete(Boolean)
       at System.ServiceModel.Channels.SynchronizedMessageSource+ReceiveAsyncResult.OnReceiveComplete(System.Object)
       at System.ServiceModel.Channels.SessionConnectionReader.OnAsyncReadComplete(System.Object)
       at System.Net.Sockets.SocketAsyncEventArgs.OnCompleted(System.Net.Sockets.SocketAsyncEventArgs)
       at System.Net.Sockets.SocketAsyncEventArgs.FinishOperationSuccess(System.Net.Sockets.SocketError, Int32, System.Net.Sockets.SocketFlags)
       at System.Net.Sockets.SocketAsyncEventArgs.CompletionPortCallback(UInt32, UInt32, System.Threading.NativeOverlapped*)
       at System.Threading._IOCompletionCallback.PerformIOCompletionCallback(UInt32, UInt32, System.Threading.NativeOverlapped*)

    #System event log (EventID 1074)

    The process C:\Windows\System32\RuntimeBroker.exe (HCI-UTS10-BO01P) has initiated the power off of computer HCI-UTS10-BO01P on behalf of user HCI-UTS10-BO01P\Administrator for the following reason: Other (Unplanned)
     Reason Code: 0x5000000
     Shutdown Type: power off
     Comment: 

    Tuesday, January 28, 2020 9:23 AM

All replies

  • Hi

    Change the following registry entry:
    1:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TimeBroker] "Start"=dword:00000003

    Change the 3 to 4.
    2:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TimeBroker] "Start"=dword:00000004
    4 is Disabled, 3 is Manual and 2 is Automatic startup.

    and reboot your system.


    Tuesday, January 28, 2020 9:37 AM
  • Thank for reply.

    I could not find correct registry entry. I found only following entry in my windows server 2016. However, I changed the this value, RuntimeBroker.exe is still running.

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TimeBrokerSvc]

    Is there anyway to disable RuntimeBroker.exe? and Is there any impact to windows server due to disable RuntimeBroker.exe?

    Tuesday, January 28, 2020 4:11 PM
  • Hi, 

    As Windows update will have a default behavior to trigger RuntimeBroker to restart PC, so please refer the following thread and manage device restarts after updates. (The process C:\Windows\System32\RuntimeBroker.exe has initiated the restart of computer)

    If your issue persists, after changed restart scheduler, try to update system to the latest version and run full scan with Windows Defender to make sure there is no malware on your system. 

    As you side the issue only occur after a specific application crash, we could contact application developer for more information, they should be more familiar with the issue about compatibility between Windows Server 2016.

    If you prefer to have a log analysis support, I would recommend to create a ticket with the link below as TechNet not support log analysis. 

    https://support.microsoft.com/en-us/supportforbusiness/productselection

    Bests, 


    Please remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Proposed as answer by Joy-Qiao Monday, February 10, 2020 4:04 PM
    Sunday, February 2, 2020 10:40 AM
  • Hi,

    Haven't received your message a few days, was your issue resolved? 
    I am proposing previous helpful replies as "Answered". Please feel free to try it and let me know the result. If the reply is helpful, please remember to mark it as answer which can help other community members who have same questions and find the helpful reply quickly.

    Bests,

    Please remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, February 10, 2020 4:04 PM